TITLE OF THE INVENTION 
STORAGE MEDIUM AND CONTENTS PROTECTION METHOD USING THE 
STORAGE MEDIUM 

- CROSS-REFERENCE TO RELATED APPLICATIONS 
This application is based upon and claims the 
benefit of priority from the prior Japanese Patent 
Application No. 11-169980, filed June 16, 1999, the 
entire contents of which are incorporated herein by 
reference . 

BACKGROUND OF THE INVENTION 
The present invention relates to a storage medium 
for use in recording and reproducing contents such as 
image data and music data, and more particularly to a 
storage medium suitable for preventing recording/ 
reproducing of contents by improper electronic devices 
and a contents protection method using the storage 
medium . 

In these years, with development of computer 
technology, various electronic devices, such as a 
personal computer, a settop box, a player and a game 
machine, which permit multimedia processing, have been 
developed. This kind of electronic devices can 
reproduce various digital contents such as image data 
and music data stored in a storage medium and can 
download digital contents and use them via the Internet, 
etc . 

These digital contents can be copied or downloaded, 



- 2 - 

without degradation in quality, by adopting digital 
coding techniques, e.g., MPEG2 , MP3 , etc. From the 
standpoint of protection of copyrights, there is a 
demand for techniques of preventing unlawful use of 
5 such digital contents. 

However, the storage medium used in electronic 
devices such as a personal computer, a settop box and a 
player are, in most cases, reversible and can be 
recorded/reproduced in another devices. Further, the 
10 specifications of . such a storage medium are basically 

open. Since the digital contents can be freely 
moved/copied, it is difficult in practice to protect 
the contents stored in the medium from unlawful 
copying/moving . 

15 As regards a storage medium, like a memory card, 

in which a storage portion and a controller are 
integrated, contents may be protected by providing an 
access disable region (secret region), which can be 
accessed by a secret procedure alone and cannot be 

20 accessed by a user, and storing in the secrete region 

important information necessary for the use of contents, 
such as copy control information and move control 
information. 

In this case, when contents are copied/moved 

25 between an electronic device (e.g., a personal computer, 

a settop box, a player) and the storage medium, the 
electronic device and the storage medium may mutually 



authenticate each other to confirm that they are lawful 
ones and share a predetermined contents protection 
function relating to the copyright protection (contents 
protection) . If they are properly authenticated, - key 
exchange may be performed in accordance with a shared 
key generation algorithm and a common authentication 
key may be acquired individually, and the authenti- 
cation key may be used to encrypt/decrypt a contents 
key (i.e., a key for decrypting contents) or 
encrypt/decrypt the contents. 

In the above case, there is a problem. Since the 
information necessary for the mutual authentication is 
preset at the stage of shipment of the electronic 
device, a program running on the electronic device may 
be modified (or attacked) after it is purchased. As a 
result, an improper device may be determined to be 
proper in the mutual authentication. Considering this, 
the mutual authentication is not enough to surely 
protect the contents . 

BRIEF SUMMARY OF THE INVENTION 

It is an object of the present invention to 
provide a storage medium and a contents protection 
method using the storage medium, which is capable of 
revoking use of the storage medium by an improper 
electronic device, thereby preventing unlawful use of 
contents . 

According to one aspect of the present invention, 



there is provided a storage medium comprising: a 
specified storage area on which revocation information 
is registered, the revocation information designating 
at least one electronic device in which use of the 
storage medium by the designated electronic device is 
to be revoked, wherein an electronic device which 
attempts to access the storage medium is controlled in 
accordance with the revocation information. 

The storage medium may further comprise a 
controller for receiving from the electronic device 
which attempts to access, identification information 
indicative of the electronic device, and checking 
whether identification information corresponding to the 
received identification information is contained in the 
revocation information, thereby determining whether or 
not use of the storage medium by the electronic device 
which attempts to access should be revoked. 

In the storage medium, when the controller 
determines that use of the storage medium by the 
electronic device should be revoked, a subsequent 
process may be halted. 

In the storage medium, when the controller does 
not determine that use of the storage medium by the 
electronic device should be revoked, the controller may 
send the identification information indicative of the 
storage medium to the electronic device which attempts 
to access, and contents encrypted with the 



identification information indicative of the storage 
medium may be written on a predetermined storage area 
of the storage medium by the electronic device. 

In the storage medium, when the controller does 
not determine that use of the storage medium by the 
electronic device should be revoked, the controller 
may send the identification information indicative of 
the storage medium to the electronic device which 
attempts to access, and contents encrypted with the 
identification information indicative of the storage 
medium may be read out from a predetermined storage 
area of the storage medium by the electronic device. 

In the storage medium, the specified storage area 
may be a storage area provided on a read-only non- 
volatile memory. 

In the storage medium, the specified storage area 
may be a storage area which is provided on a rewritable 
read-only non-volatile memory and can be accessed only 
by a secret specific procedure. 

According to another aspect of the present 
invention, there is provided a contents protection 
method comprising the steps of: providing a specified 
storage area on storage medium and registering 
revocation information on the specified storage area, 
the revocation information designating at least one 
electronic device in which use of the storage medium by 
the designated electronic device is to be revoked; and 



controlling an electronic device which attempts to 
access the storage medium in accordance with the 
revocation information . 

In the method, the controlling step may comprise 
the steps of: receiving from the electronic device 
which attempts to access , identification information 
indicative of the electronic device; and checking 
whether identification information corresponding to the 
received identification information is contained in the 
revocation information, thereby determining whether or 
not use of the storage medium by the electronic device 
which attempts to access should be revoked. 

In the method, when it is determined in the 
checking step that use of the storage medium by the 
electronic device should be revoked, a subsequent 
process may be halted. 

In the method, the controlling step may comprise 
the step of sending, when it is not determined in the 
checking step that use of the storage medium by the 
electronic device should be revoked, the identification 
information indicative of the storage medium to the 
electronic device which attempts to access, wherein 
contents encrypted with the identification information 
indicative of the storage medium may be written on a 
predetermined storage area of the storage medium by the 
electronic device . 

In the method, the controlling step may comprise 



the step of sending, when it is not determined in the 
checking step that use of the storage medium by the 
electronic device should be revoked, the identification 
- information indicative of the storage medium to the 
electronic device which attempts to access, wherein 
contents encrypted with the identification information 
indicative of the storage medium may be read out from a 
predetermined storage area of the storage medium by the 
electronic device . 

In the method, the specified storage area may be a 
storage area provided on a read-only non-volatile 
memory . 

In the method, the specified storage area may be a 
storage area which is provided on a rewritable read- 
only non-volatile memory and can be accessed only by a 
secret specific procedure. 

Additional objects and advantages of the invention 
will be set forth in the description which follows, and 
in part will be obvious from the description, or may be 
learned by practice of the invention. The objects and 
advantages of the invention may be realized and 
obtained by means of the instrumentalities and 
combinations particularly pointed out hereinafter. 

BRIEF DESCRIPTION OF THE SEVERAL VIEWS OF THE DRAWING 
The accompanying drawings, which are incorporated 
in and constitute a part of the specification, 
illustrate presently preferred embodiments of the 



invention, and together with the general description 
given above and the detailed description of the 
preferred embodiments given below, serve to explain the 
principles of the invention in which: 

FIG. 1 is a block diagram showing the structure of 
a contents use management system according to an 
embodiment of the present invention; 

FIG. 2 is a block diagram showing the structure of 
a recording/reproducing device shown in FIG. 1; 

FIG. 3 is a block diagram showing the structure of 
a storage medium shown in FIG. 1; 

FIGS. 4A and 4B show examples of structures of 
memory areas in the contents use management system and 
recording/reproducing device; 

FIG. 5 is a view for explaining operations at a 
time of recording contents from the contents use 
management system to the storage medium; and 

FIG. 6 is a view for explaining operations at a 
time of decrypting and reproducing encrypted contents, 
which are stored in the storage medium, on the 
recording/reproducing device. 

DETAILED DESCRIPTION OF THE INVENTION 
An embodiment of the present invention will now be 
described with reference to the accompanying drawings . 

FIG. 1 shows an example of the structure of a 
contents use management system according to an 
embodiment of the present invention. In the 
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description below, music data is used as contents 
(digital contents). Note that, however, the contents 
may be movie data, game software data, etc. 

An EMD (Electronic Music Distributor) is a music 
5 distribution server or music distribution broadcast 

station . 

A contents use management system (hereinafter 
referred to as LCM (License ( SDMI- ) Compliant Module)) 1 
is implemented, for example, by a personal computer 

10 ( pc ) • A contents protection method in the LCM 1 is 

based on a technique in which encrypting/decrypting of 
contents is managed by using identification information 
(medium ID) for identifying a storage medium 13 in 
which contents are to be recorded. 

15 The LCM 1 includes receivers #1 to #3 corre- 

sponding to a plurality of EMDs (EMD #1 to EMD #3 in 
this case). The LCM 1 receives, through the receivers 
#1 to #3, encrypted contents or their licenses (the use 
condition and decryption key for the encrypted 

20 contents), and the like distributed by the EMDs. 

Receivers #1 to #3 may have a reproducing function or 
charging function. Also, the user can purchase the 
contents he or she likes using the charging function. 
The LCM 1 includes a secure contents server 

25 (Secure Music Server: SMS in this case; to be also 

simply referred to as an SMS hereinafter) 2. The SMS 2 
receives via an EMD interface (I/F) 3 the encrypted 



contents purchased by a user. The encrypted contents 
(music contents in this case) are decrypted by the EMD 
I/F 3 as needed , and undergo format conversion and re- 
encryption. Upon receiving the encrypted contents, the 
SMS 2 stores the received contents in a music data 
memory 10 , and a music data decryption key (contents 
decryption key) in a license memory 9. The SMS 2 may 
have a reproducing function for permitting the user to 
test-listen to the distributed music contents. In this 
case, the music contents managed by the SMS 2 can be 
reproduced on the PC. 

In addition, the SMS 2 has a function of 
outputting, via a medium I/F 6, contents data (digital 
contents) to the storage medium (to be also referred to 
as a PM (Portable Memory) hereinafter) 13, such as a 
memory card, which can be loaded in the medium I/F 6. 
The PM 13, when used, is set in a recording/reproducing 
device (PD (Portable Device) in this embodiment) 12 
having a structure as shown in FIG. 2, which is 
specifically designed for the PM 13. Thus, the 
contents recorded in the PM 13 can be reproduced on the 
PD 12 . 

The SMS 2 records contents on the PM 13 directly 
via a medium I/F 6 or with the intervention of the 
PD 12 . 

Check-in/check-out functions of the LCM 1 will now 
be described in brief . 



The check-out process means making a copy of 
"parent" contents stored in the LCM 1 on the PM 13 as 
"child" contents. The "child" contents can be freely 
reproduced by the PD 12, but it is not allowed to form 
"grandchild" contents from the "child" . The number of 
"children" "parent" can have is defined as an attribute 
of "parent". On the other hand, the check-in process 
means erasing (or disabling to use) "child" contents 
by the LCM 1 when the PM 13 is loaded in the LCM 1, 
thereby recovering the right of "parent" contents in 
the LCM 1 to form one "child". This process is also 
called check-in at "parent". 

The PM 13, as shown in FIG. 3, includes a 
controller 130 and a storage portion having a public 
area 131 and a secret area 134. The secret area 134 
can be accessed only by a non-public procedure (i.e., 
a specific secret procedure) via the controller 130. 
The secret area 134 is used for storing information 
necessary for decrypting the contents. The secret area 
134 includes a secret ROM area for storing constants 
such as medium identification information (hereinafter 
"medium key") K M , which is inherent to the associated 
PM 13, and a secret R/W (read/write) area for storing 
variables such as a license decryption key, which is 
secret data (called "medium mark") provided from a 
licensing side. It suffices if the medium key K M is 
inherent to each PM 13, and various identification 



information such as a serial number or a product number 
(a product number or a product lot number of each PM 
13) may be used. The medium key K M may be produced 
from the identification information inherent to each PM 
13 and the license decryption key. The secret ROM area 
is provided on, e.g., a ROM (a read-only non-volatile 
memory), and the secret R/W area is provided on, e.g., 
a specific area of a flash memory (rewritable non- 
volatile memory) . 

The public area 131 is an area other than the 
secret area, which can be accessed by an ordinary 
procedure. The public area 131 includes a read-only 
public area (hereinafter "public ROM area") 132 and a 
rewritable public area ("public R/W area") 133. The 
public ROM area 132 is provided on, e.g., a ROM, and 
the public R/W area 133 is provided on, e.g., a flash 
memory. The public ROM area 132 and public R/W area 
133 may be provided on the aforementioned ROM, on which 
the secret ROM area is provided, and on the 
aforementioned flash memory on which the secret R/W 
area is provided. 

On the public ROM area 132, revocation information 
relating directly to the present invention is pre- 
registered at a stage of shipment of the associated PM 
13. The revocation information serves to designate an 
electronic device (LCM, PD) in which use of the PM 13 
by the designated electronic device is to be revoked so 



as to protect the contents, and more specifically, an 
electronic device (LCM, PD) whose access request for 
recording/reproducing digital contents in the PM 13 
(the public R/W area 133 of PM 13) is to be revoked. 
In the present embodiment, the revocation information 
is a list of identification information (device ID) of 
electronic devices whose access requests are to be 
revoked. In this description, the revocation 
information is referred to as "revocation list RL" . 
Specifically, a revocation list RL is pre-registered on 
the public ROM area 132. 

The public R/W area 133 may store encrypted 
contents key (contents decryption key) and encrypted 
contents, as needed. The encrypted contents key is 
obtained by encrypting a contents key K c (inherent to 
contents C) for decrypting the contents C with a medium 
key K M depending on the PM 13. The encrypted contents 
(doubly encrypted contents in this embodiment) are 
obtained by encrypting the contents (K C [C]) encrypted 
by K c with the medium key K M depending on the PM 13 
(i.e., K M [K C [C]]) . 

The LCM 1 and PD 12, as shown in FIGS. 4A and 4B, 
have similar storage areas to the PM 13. 

The LCM 1, as shown in FIG. 4A, includes a public 
area 111 having a public ROM area 112 and a public R/W 
area 113, and a secret area 114 which can be accessed 
only by a non-public procedure. The music data memory 
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10, as shown in FIG. 1, is provided on the public R/W 
area 113. Identification information (device ID) ID L cm 
of the LCM 1 is pre-stored on the secret area 114. The 
contents key K c of the respective contents are stored 
on the secret area 114, as needed. A guest book memory 
8, as shown in FIG. 1, is provided on the secret area 
114. All the music contents stored in the music data 
memory 10 (public R/W area 113), which is under control 
of the SMS 2, have as their attribute information the 
contents ID (TID) , or identification information, a 
predetermined number of copiable contents, i.e. the 
number of remaining children, and a check-out list. 
This attribute information is referred to as "guest 
book" and stored in the guest book memory 8 (in the 
secret area 114). The LCM 1 has a secret area driver 7 
for reading data out of the guest book memory 8 
(provided by the secret area 114), after a secret 
specific procedure for accessing the guest book memory 
8 is performed by the SMS 2. Since the guest book does 
not directly relate to the present invention, the 
details of the method for using it are not described. 

On the other hand, the PD 12, as shown in FIG. 4B, 
includes a public area 121 having a public ROM area 12 2 
and a public R/W area 123, and a secret area 124 which 
can be accessed only by a non-public procedure. 
Identification information ID PD of the PD 12 is pre- 
stored on the secret area 124 in a fixed fashion. The 
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contents keys Kq for respective contents are stored on 
the secret area 12 4 , as needed. 

FIG. 2 shows an example of the structure of the 
PD 12. 

5 When the PM 13 is used, it is loaded in a medium 

I/F 12f of the PD 12. When the LCM 1 performs a 
read/write operation on the PM 13 via the PD 12, the 
secret area 134 (see FIG. 3) of the PM 13 is accessed 
via a PD I/F 5 in the LCM 1, and an LCM I/F 12e and a 

10 medium I/F 12f in the PD 12. The medium I/F 12f has a 

secret area access section (not shown) for accessing 
the secret area 134 of PM 13. The public R/W area 123 
and secret area 124 (see FIG. 4B) in the PD 12 are 
provided, for example, on a flash memory 12d. The 

15 public ROM area 12 2 (see FIG. 4B) is provided on a ROM 

12c . The ROM 12c stores a program for effecting mutual 
authentication with the PM 13. The PD 12 executes a 
process for mutual authentication, etc. with the PM 13 
in accordance with this program under control of a 

20 CPU 12a. 

The operation of the present embodiment will now 
be described with reference to a flow chart of FIG. 5. 
Assume that a check-out operation is performed, in 
which encrypted music contents distributed by the EMD 

25 are received by the EMD I/F 3 in the LCM 1, the 

received contents are temporarily stored in the music 
data memory 10 by the SMS 2, a duplicate of the 
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contents is recorded (copied) as "child" contents on 
the PM 13 which is loaded, for example, in the medium 
I/F 6. 

To start with, a check-out instruction is issued 
5 via, e.g., a user interface (I/F) 15 of the LCM 1, and 

the PM 13 is loaded in the medium I/F 6 of the LCM 1. 
At this stage, mutual authentication is effected 
between the medium I/F 6 of LCM 1 and the controller 
130 of PM 13 (step S101) . In general, the mutual 
10 authentication is performed, as described below, 

assuming that the LCM 1 is a device A and the PM 13 is 
a device B. 

Consider that the device A authenticates the 
device B. The device A has a public key kp and the 

15 device B has a secret key ks corresponding to the 

public key kp, if the device B shares a predetermined 
contents protection function with the device A. The 
device A generates a random number R and sends it to 
the device B. The device B receives the random number 

2 0 R and encrypts it with the secret key ks . The device B 

returns the encrypted random number (expressed by 
ks[R]) to the device A. The device A decrypts the 
random number ks[R] using the public key kp. If the 
decrypted result is equal to the random number R, the 

25 device A determines that the device B is a proper 

counterpart . 

Then, the device B performs the same procedure for 
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the device A, thereby to effect mutual authentication. 
In this case, the device B has a public key, the device 
A has a secret key, the device A encrypts a random 
number generated by the device B with the secret key, 
5 and the device B decrypts the encrypted random number 

using the public key and determines whether the 
decrypted result is equal to the previously generated 
random number . ^ 

If it is confirmed that the LCM 1 and the PM 13 

10 are mutually proper counterparts by the mutual 

authentication, key exchange is made between the medium 
I/F 6 of LCM 1 and the controller 130 of PM 13 and the 
same authentication key (Kxi) is shared. The key 
exchange is performed, for example, by a method using a 

15 random challenge response represented by CSS (Content 

Scrambling System) employed as a content encrypting 
algorithm for DVD-ROMs. The authentication key (K X i) 
is a variable key which varies from operation to 
operation. 

20 The medium I/F 6 of LCM 1 reads out its own 

identification information IDlq^ kept in secrecy on the 
secret area 114, and encrypts the read-out information 
ID LCM using the authentication key (K X i). The 
encrypted information ID^cm ( =K X1 t id LCm1 ) *- s sent from 

25 the medium I/F 6 to the PM 13 (step S102). 

The controller 130 of the PM 13 decrypts the 
information K X i[ID LCM ] from the LCM 1 with the key 
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( K Xl) acquired by the previous key exchange, and 
obtains the information ID^cm (step S103) . 

Then, the controller 130 of the PM 13 refers to 
the revocation list RL in the public ROM -area 132, 
5 using the decrypted identification information ID^qm of 

the LCM 1, and determines whether identification 
information corresponding to the ID^c^ is registered. 
Thereby, it is determined whether use of the PM 13 by 
the LCM 1 is to be revoked or not (step S104). 
10 If the identification information corresponding to 

the IDlcm ^ s registered on the revocation list RL, the 
controller 130 determines that the use of the PM 13 by 
the LCM 1 should be revoked, and halts the subsequent 
process. 

15 On the other hand, if the identification 

information corresponding to the ID^cm i- s not 
registered on the revocation list RL, the controller 
130 determines that the use of the PM 13 by the LCM 1 
is permitted and reads out the medium key Kj^ kept in 

20 secrecy on the secret area 134 (step S105). Then, the 

controller 130 performs key exchange with the medium 
I/F 6 of LCM 1 (i.e. via the medium I/F 6 of LCM 1) and 
shares the same authentication key - In addition, 

the controller 130 encrypts the read-out medium key 

25 using the authentication key (K X 2) and sends the 

encrypted K M (=K X2 [K M ]) to the LCM 1 (step S106). 

The medium I/F 6 of LCM 1 decrypts the K X 2[K]y[] 
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from the PM 13, using the authentication key (K X 2) 
acquired by the key exchange , and obtains the medium 
key K M (step S107). 

Subsequently, the medium I/F 6 of LCM 1 encrypts 
5 the contents key kept in secrecy on the secret area 

114, using the obtained medium key K^, and writes the 
encrypted Kq (=K m [Kq]) in the public R/W area 133 of 
the PM 13 (step S108). 

As has been described above, according to the 

10 present embodiment, the LCM 1 receives from the PM 13 

the (encrypted) medium key K^, which would not be 
delivered from the PM 13 to the LCM 1 if the use of the 
PM 13 is revoked in accordance with the revocation list 
RL. Using the medium key K^, the LCM 1 encrypts the 

15 contents key Kq kept in secrecy on the secret area 114 

of LCM 1. The encrypted key is written in the public 
"R/W area 133 of the PM 13. Accordingly, compared to 
the method in which the authentication key is exchanged 
between the LCM 1 and PM 13 and the contents key is 

20 encrypted/decrypted using the authentication key, the 

use of the PM 13 by the LCM, which is an object of 
revocation designated in the revocation list, can be 
surely revoked (excluded) . Besides, when the encrypted 
contents (Kq[C]) stored in the music data memory 10 

25 provided on the public R/W area 113 of LCM 1 is to be 

sent to the PM 13, the encrypted contents may be 
further encrypted using the acquired medium key K M . 
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Referring now to a flow chart of FIG. 6, a 
description will be given of an operation in which 
the encrypted contents stored in the PM 13 are 
decrypted and reproduced by the recording/reproducing 
5 device (PD) 12. 

When an instruction for reproduction has been 
issued to, for example, the PD 12 and the PM 13 has 
been loaded in the medium I/F 12 f of PD 12, mutual 
authentication is effected (like step S101) between the 
10 CPU 12a of PD 12 and the controller 130 of PM 13 (step 

S201). If it is confirmed that the PD 12 and the PM 13 
are mutually proper counterparts by the mutual 
authentication, key exchange is made between the CPU 
12a of PD 12 and the controller 130 of PM 13 and the 
15 same authentication key (K X 3) is shared. 

The CPU 12a of PD 12 reads out its own 
identification information IDp D kept in secrecy on the 
secret area 124, and encrypts the read-out information 
ID PD using the authentication key (K X 3)- The encrypted 
20 information ID PD (=K X 3[ID PD ]) is sent from the medium 

I/F 12f to the PM 13 (step S202). 

The controller 130 of the PM 13 decrypts the 
information K x3 [ID PD ] from the PD 12 with the key (K x3 ) 
acquired by the previous key exchange, and obtains the 
25 information ID PD (step S203). 

Then, the controller 130 of the PM 13 refers to 
the revocation list RL in the public ROM area 132, 



using the decrypted identification information IDp£> of 
the PD 12, and determines whether identification 
information corresponding to the IDpp is registered. 
Thereby, it is determined whether use of the PM 13 by 
the PD 12 is to be revoked or not (step S204). 

If the identification information corresponding to 
the ID PD is registered on the revocation list RL, the 
controller 130 determines that the use of the PM 13 by 
the PD 12 should be revoked, and halts the subsequent 
process. 

On the other hand, if the identification 
information corresponding to the IDp D is not registered 
on the revocation list RL, the controller 130 
determines that the use of the PM 13 by the PD 12 is 
permitted and reads out the medium key K M kept in 
secrecy on the secret area 134 (step S205). Then, the 
controller 130 performs key exchange with the CPU 12a 
of PD 12 (via the medium I/F 12 f of PD 12) and shares 
the same authentication key (K x4 ). In addition, the 
controller 13 0 encrypts the read-out medium key 
using the authentication key (K x4 ) and sends the 
encrypted K M (=K X4 [K M ]) to the PD 12 (step S206). 

The CPU 12a of PD 12 decrypts the K x4 [K M ] from the 
PM 13, using the authentication key (K x4 ) acquired by 
the previous key exchange, and obtains the medium key 
K M (step S207) . 

The CPU 12a of PD 12 reads out the encrypted 
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contents key Kq (=KmC k c]) stored on the public R/W area 
133 of PM 13 and decrypts it using the medium key K M 
obtained in step S207. The decrypted contents key Kq 
is written on the secret area 124 and kept in secrecy 
5 (step S208). Accordingly, using the decrypted contents 

key Kq (and, if necessary, the previously decrypted 
medium key K^) , the PD 12 can decipher and reproduce 
the encrypted contents stored on the public R/W area 
133 of PM 13. 

10 As has been described above, according to the 



present embodiment, the PD 12 receives from the PM 13 



the (encrypted) medium key K^, which would not be 



delivered from the PM 13 to the PD 12 if the use of the 



PM 13 is revoked in accordance with the revocation list 



15 



RL. Using the medium key K M , the PD 12 decrypts the 



encrypted contents key (K M [K^]) kept in secrecy on the 



secret area 134 of PM 13. The encrypted key is written 



on the secret area 124 of the PD 12. Accordingly, 



compared to the method in which the authentication key 



20 



is exchanged between the PD 12 and PM 13 and the 



encrypted contents key is decrypted using the 



authentication key, the use of the PM 13 by the PD, 



which is an object of revocation designated in the 



revocation list, can be surely revoked (excluded) . 



25 



In the above-described embodiment, when 



information kept in secrecy on the secret area, or 



information which is to be kept in secrecy on the 
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secret area, is transmitted/received between the LCM 1 
and PM 13, or between the PD 12 and PM 13, the 
information is encrypted using the authentication key 
K Xi (i = 1 to 4). In this case, the encrypting with 
5 use of the authentication key is not always necessary. 

However, in order to ensure the protection of contents, 
the encrypting using the authentication key is 
preferable . 

In the above embodiment, the revocation list RL is 

10 registered on the public ROM area 132. However, it may 

be registered anywhere if falsification of the list RL 
is prevented. For example, the revocation list RL may 
be registered on the secret area 134 which can be 
accessed only by a secret specific procedure. 

15 As has been described above in detail, according 

to the present invention, it is possible to revoke use 
of the storage medium by an improper electronic device, 
thereby preventing unlawful use of contents. 

Additional advantages and modifications will 

20 readily occur to those skilled in the art. Therefore, 

the invention in its broader aspects is riot limited to 
the specific details and representative embodiments 
shown and described herein. Accordingly, various 
modifications may be made without departing from the 

25 spirit or scope of the general inventive concept as 

defined by the appended claims and their equivalents. 



